Wireless Access

Dear Colleagues,

We have problem with SSID when we created new SSID, our clients could not get internet access but some of them can get, we had virtual mobillity controller (8.1.0.0) without mobillity master and all settings of vlans and profiles are true. We could not understand which settings must be configured for access all cliyents to the internet, please help to resolve problem

Hi Namaz,

Start troubleshooting layer for layer:

1. Does the client succes the 802.11 authenticated handshake?

# show auth-tracebuf mac "client mac-address"

2. Does the client get a user-role?

# show user-table mac "client mac-address"

3. What ACL belongs to the user-role

4. Does the client get a dchp lease?

Some other quick test. Create a new temporarily new SSID with same settings through the wizard to quickly see if your issue is related to the SSID configuration or related profiles.

Dear Marcel Koedijk,

We have checked all command which you shared with us there are we see that cliyent get IP address. Also we checked DHCP Server where we show this IP address, then we try to ping end point from controller and dhcp server (windows 2008 R2), then we checked our switches where our vlans are true and coincides with vlan of controller's interfaces, I could understand if net packet get to some end point cliyent why some of them could not get i? User role I have checked and there are permit all from source any to any destinations.

Best regards,

Namaz Bayramov

Hi Namaz,

If the client get a DCHP addrees from the external DHCP server and the correct user-role is given to the client (with a any any permit) then this issue is most likely not at the wlan side but on the edge infrastructure.

Try to set een temporarily VLAN IP interface direct on the edgeswitch on the same vlan of your SSID, and check if you can ping that one correctly.

If not i will recommend you to open a TAC case, maybe could be a bug in the software?.

Dear Marcel Koedijk,

This Vlan wich SSID broadcasting is the reachable from core switch side, also try this solution, maybe taht there are some settings which are block some restrictions which are deny network traffic on endpoint clients?

Best Regards,

Namaz Bayramov

Dont think so.

How many wlan controllers do you have and are the clustered?

In a cluster enviroment check the command "show lc-cluster vlan-probe" to see if the cluster status is Layer2 connected.

If the cluster status is L2 you are sure that the VLANs can probe each other throug the switch infrastructure.

Be sure that all controllers have correct vlan uplink configuration. Maybe some clients connect to a wrong configured controller?